last executing test programs: 15m27.888211856s ago: executing program 1 (id=2): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) ioprio_get$uid(0x3, 0x0) r5 = syz_io_uring_setup(0x40005c2, &(0x7f00000003c0)={0x0, 0x2, 0x40, 0x4, 0x219, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2b1022}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x30, 0x2, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8001}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r8, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000000)) syz_usb_connect$uac2(0x3, 0x99, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000201e041030400001020301090287000301ab6006080b0101010320090904000000010120000924010000072706000c2403040103020201000004072409050600fb090401"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) listen(r9, 0xda90) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$unix(r10, &(0x7f0000000980)="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", 0x1000, 0x40800, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03cf4a0004000000040000000a00000000000000f143e68fa685962cf02808ebaec821045747a24f26ffa8bb5844dd0f9422740c5530ac78dbf7af4c9b66953a47dd00"/76, @ANYRES32=r2, @ANYBLOB="dd0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf500090584"], 0x0) 15m23.878102447s ago: executing program 1 (id=6): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) 15m21.876841089s ago: executing program 1 (id=11): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xa40d, 0x1a9182) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x195180, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) writev(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x20000000) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xfce) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 15m18.809192134s ago: executing program 4 (id=15): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)) fanotify_init(0x200, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = fanotify_init(0x9, 0x800) fanotify_mark(r4, 0x161, 0x40000867, r3, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f00000001c0)={0xebc8, 0xfffffffffffffffb}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000080)) 15m18.193182708s ago: executing program 1 (id=17): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001f6bc115716f64a0f68725fbb10a5d720b35427ad509e36734e62f0a044e3b68d489820a998f5310f18d0a9640730d4dd8b5010fa17e0c532cd893a519658929ca9e3bbf8e74f31766c29e4357b628303"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40840) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xcbfb6000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17240000212000004c0012800c0001006d6163766c616e003c0002800800030003000032"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) r7 = dup(r0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0xcb, &(0x7f0000000080)=0x47ac6, 0x4) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r10, 0xc018480b, &(0x7f00000000c0)={0x3, 0x200, 0x0, 0x200002, 0x7, 0x47}) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15m16.160652861s ago: executing program 4 (id=23): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x4, 0x4, 0x1, 0x1a5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000120a010200000000000000000100000214000480060008404e210000060007404e23000080000000060a050000000000000000000300000508000b40000000030900010073797a30000000000c000340000000000000000108000a40000000013c000580080001400000006708000140000008000800014000008808080001400000005e0800014000006001080001400000002e080001400000002f08000b4000000002a0000000160a010100000000000000000a0000050900010073797a310000000008000740000000005000038008000140000000000400038040000380140001006c6f000000000000000000000000000014000100726f736530000000000000000000000014000100776732000000000000000000000000000900010073797a310000000009000200bb52cf03f8a7f02e73797a3100000000080007400000000208000740000000005c000000060a010200000000000000000500000308000a40000000003f0007403f07b39f6506aa3c6142ba4d21e4313260b650480e5a135f4b28946568bcacf204f14d66406fe4ea4f24709c2487a7ce208d7622c70ea37e181be700140000001100010000000000000000000000000a"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x1, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0xf, 0x8, "735a68ed41cc4c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 15m12.449171935s ago: executing program 4 (id=27): semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x8, 0x1800}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000010104000000000008000001000002069e32953f0c6b68024a42c890ad613dce6332b8b7deb4beb7ce62a27c04b089d76f686d8201b9685e3de7db97386dc990382ba87365a9df299bc9e00e94170f3f1a9725d8715fa4715c3b798c3d64f2ffa791e84d5779746fa05f59570f122dd173289f8295d83f56beeaa86a2319bfcab5bbfdbf4bca1c2f44b113af2a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000010b002e02000000000000000000", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 15m9.753909034s ago: executing program 4 (id=32): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0x32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000280)=0x2) open$dir(&(0x7f0000000300)='./file0\x00', 0x424a40, 0x1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000000)={0x0, &(0x7f0000001ac0)}) 15m6.413669004s ago: executing program 4 (id=35): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffffffb, 0x0, 0xa, 0x6, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000009c0)={{r0}, r4, 0x10, @inherit={0x60, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000300000000000000ff00000000000000cba835360000000001000000000000000600000000000000090000070000000006000000000000008e0000000000000000000000000400"/96]}, @devid=r5}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x9, 0x0, 0x0, 0xff, 0x0, 0x0, 0x10, 0x140000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 15m6.053023766s ago: executing program 4 (id=37): socket$inet(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, {0x9, 0xb82}, {0xfff}, 0x3, [0x6, 0x1400000, 0xd, 0x7, 0x3, 0x10, 0x0, 0x6, 0x2, 0x2, 0x9, 0x6, 0xc5, 0xcf, 0x81, 0x6]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002100)={{r0}, r1, 0xa, @unused=[0xfffffffffffffff9, 0x100000000, 0x1, 0x2], @subvolid=0x8000000000000001}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x118}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaa", 0x90}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bb", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902", 0x8a}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd233497", 0xbc}, {&(0x7f0000000700)="b87d1ee3911b6d31600f5ca74def39749241b1a26e48c06e46bd44ff0e61f27afa45fcc9ed77b63084d41e0c803a2a3f22095694fb59dcc3c932706cb6798b13cb2b5fe99b47a13ac6da6111250bbcb3503fc8754e04e0e2d75a17a3ecdfb1d60c8890d216a36db2f94a2767d8c9df18da16f532787d54dbc3854f6a6a0bfd278919755fb544b11bb8b2bfa79add2ad70cb11dcac552dbec5c9cb589cb065b9fda40ea5ccb984f62385cf1dec62f7166a0cb9a0c73f7306e5c540301a0aaece331717006b1c636e8fd18d930846f0f8ae913045b4177ff2d9d8f", 0xda}, {&(0x7f0000000800)="f21a05ad8dc2aaf0018b0913faa37ef409a8bc6d95375ae6bc602946b1fe39b12e41abe157b0b1b87eff96196fbb255318370913da849fb6850b5ad8028a76e6f32cf753f7a987ff99d8d366c9c88609da398120fa2e86b36a26b6c5cd81a528aef8e9066a", 0x65}], 0x4}}], 0x3, 0x2090) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) close(r2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x2000008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8000, 0x0) 10.577066673s ago: executing program 0 (id=3313): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000ce26"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x84844) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009050f02"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x65, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "629548a147"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x6, 0xff, 0x9}, [@obex={0x5, 0x24, 0x15, 0x800}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xe, 0x3, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x80, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x51, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0xd8, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x9, 0xb6, 0xff, 0x6c}, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="050f4d000618100a07230100000000a30900000000300000000f0000001410040954630dd58f08a3815152483a4eb07c680b1001022000fc020500aa03100b0b1001040800030307cc65885a0b"], 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x102, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2856}}]}) 8.170695321s ago: executing program 3 (id=3315): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x44, 0x2}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in=@local, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0x85f, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r3, 0xee00}, 0xc) 8.057664526s ago: executing program 0 (id=3316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000340)={0xffffbffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe86, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r8, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="9ac1bb9db33607f58f1a8d7204be1ead184f1f5b7404000000000000009e66a632db11e6c79ffba6ada1148d1361957b8d78fc05eecb40637cc92c8b78a6fe6143f9dc0454ef66b8b8209bbc4e4106c5c18a535756646d57900ae5e4ecc0c0e3d83cc41e2a2e144fd4e1430c32498bdf0b18c8778de430d8c3c61aa690c5b274464a5bbbf644f370942bcef98b3962278109c1d24c18fe04d01a0c6005b13385d4c9192c48695dccc34f2c7b8f574fa8d17ba46f134e18bddfaf468b08b92e3b65d4d57532a728af650f812680fa50121c703b81fd189bf86967322cefe3087006606a51034da3be0fb25daee8a9275121e1a511ec"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x48040) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 8.0537549s ago: executing program 5 (id=3317): r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) (async) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r7, &(0x7f0000000100)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r7, &(0x7f00000001c0)=@unlock_all, 0xb) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000, 0x3f}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000, 0x3f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x2, 0x0, &(0x7f00000002c0)="b800", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x2, 0x0, &(0x7f00000002c0)="b800", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) (async) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) (async) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x36880, 0x10) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) 7.908147315s ago: executing program 3 (id=3318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000280)={0x27800000000, 0x0, 0x0, r4}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 7.060985111s ago: executing program 6 (id=3320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = inotify_init() r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xeb}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @remote}}}, 0x108) read$FUSE(r5, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000007680)=ANY=[], 0x16a0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x0, 0xa, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, 0x0, 0x20000000) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000000)={0x7a, 0x0, 0x10001}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYRESDEC=r11, @ANYRESHEX=r9, @ANYRES16=r9, @ANYBLOB="3e39d86880ffb95162f11790b2d85aa7a13f0fc67a0b8bfe1e4d7bccd704e6c603f9a769363d11f054c590caf4fbeaa06fc782ca23347b449509fc55291424d672911cdc8401500bbbf72832ec96aef24e72712a005e408e6d598a749aa07ea4f4ae86467339063b246a0e28259b6e32d419c5ba5882136d8c972773", @ANYRESHEX=r9, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYBLOB="afc19142a43cc4588c8ce5820bb1a954abcf1149219f267f49381a0a37c5559b668dfdf42bc602a929496ff49c2780899a62fb458ac9749f5b09fece2ff9f2404274504a858b1f1bb7617c5091c7e91fc570ed28e6bb8cf46cac754449aa26af3dfe7e0c8929beec2895aa93636cd7869c6eedd937f644da6ed53ab60e934271e05115128cdfae1ca23e33b034f2d882a7349a7291db2a3dd879841733dd812828c835b7733e6a5b19bceb54e2b46274e45366bea3ab46ebf7bfc2"], 0x90) 6.587052038s ago: executing program 3 (id=3321): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x6, 0x34325258, 0x4, 0x3, [{0x1, 0x48256d1d}, {0x1, 0xa00000}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x5e2}, {0xbff, 0x5}], 0xa, 0x3, 0x3, 0x1, 0x6}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}}, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 6.515709064s ago: executing program 5 (id=3322): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000540)=ANY=[@ANYBLOB="9d374b2337375de684659be1012c2c9da1b8a6edd425976947000033ab15437ed4e38b3e6656bf1ac8dc4f9a2f09539c6c24b1480ddcd05f11dd56040ed9575bc47648aaf3e331c85c0c009400bce3dc92c83a832a7131298edd5fd198b1fdd2a74e193eea29769e81110cd48ceb0681ef7e6e55ce39cfa52e04ebd49d899f98660ebb827d52426ed8d611428bfb7189284e79491a649bbd4ae5194ad1f91d1e0e0fb5930a7bbcc7c0f7534636699466b88bf0d1c68dd33ca509530cbab1222eb81202f74f7625f9766851878dc8d8b4432f9c5c9217f3d68a474f173c94f7bef7d89d404895530e1584a0cf69f68112d62a927df6cb85a1cc67d8425bc5b73faba79783e694b852b703a7a8a9e9bd43c27796183854f59b37f8db0262b52af8c125639fa6293490ea2e11df695aa48c03e3"], &(0x7f0000000180)={0x1, 0x1, [0xb5b, 0x4e1, 0xe4b, 0xa20]}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) dup(r6) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) recvmmsg(r3, &(0x7f0000007780), 0x0, 0x2100, &(0x7f0000007900)={0x0, 0x989680}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, r1, 0x0, 0xff, 0x1541}) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$kcm(0x29, 0x7, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 5.900817743s ago: executing program 3 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000200000009fc"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000003000000040000000400000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000080), &(0x7f0000000880)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x721803, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000002840)="9dcbe31ecd2c02d6ba9a45eecb76750e3add64f393", 0x15}], 0x1, 0x9, 0x7aa3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000003c0)="3e0fc7692164656526660f3880aafcf10000b805000000b9080000000f01d9660fc7300fc71a660f383792007000000f06372e0f21ff660f38819a03000000"}], 0x1, 0x35, 0x0, 0xd) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x300, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c1905409904e25a0f090102070109021b0001000000000904000001ff53c20009040002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000280)="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", 0x0}}, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, r13}, 0xc) 5.365369084s ago: executing program 6 (id=3326): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002e00090027bd700000004600040000000400180004001e007ec2928fe2dbe16aa7a8f3f26ed5661ca5853524e31221c397a5fedcdc3450e1"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30", @ANYRES64], 0xec}, 0x1, 0x0, 0x0, 0x4004895}, 0x4080) syz_emit_ethernet(0xa7, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064d0, &(0x7f0000000140)={0x0}) r5 = socket(0x2b, 0xa, 0xb14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4001, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) creat(&(0x7f0000000c00)='./file0\x00', 0x84) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r8, &(0x7f00000020c0)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1fd, {0x7, 0x29, 0x1, 0x24ff87199fb5ffc7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0xfffffffffffffffe, 0x1, {0x8, 0x2, 0x0, {0x5, 0x1, 0x7505, 0x8e3, 0x4, 0x1, 0x9e7, 0x35741062, 0x0, 0xa000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() 4.98900012s ago: executing program 2 (id=3327): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x50, 0x0, 0x0}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) 4.704347305s ago: executing program 5 (id=3328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="26c1fef44a84cb34aefedaf4", 0xc}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x360}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="d8", 0x1) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) sendmmsg$unix(r6, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41970d", 0x5}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = userfaultfd(0x80800) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xaa}) syz_kvm_setup_cpu$x86(r8, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xf2c7, 0x3, 0x5, 0x4, 0x4]}}) 3.740556954s ago: executing program 5 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x4, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) syz_emit_ethernet(0xd3, &(0x7f0000000100)={@random="e33130495bfd", @empty, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "9829c1", 0x95, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x6, 0xa, '\x00', [@ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x6, [0x5, 0x9d4, 0x400a, 0x83]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x35, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x2, 0x8, 0x0, 0x1, 0x3, 0x4, 0x1, 0x6, 0x8000, 0x2, 0x4e21, 0x4e20}, 0x4, 0x4}, 0x1, 0x3}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 3.699131808s ago: executing program 0 (id=3330): ptrace(0x10, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000240)=""/171) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r0, 0x0) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) syz_mount_image$fuse(0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000002c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.665865173s ago: executing program 3 (id=3331): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x5) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r2, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000"], 0x0) 3.621686426s ago: executing program 2 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x200000, 0xfffffffd, 0x1}, {0x0, 0x6, 0x6, 0x0, 0x7}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x333, 0x4, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x4, 0x110, 0x2}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0x1ff}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="28080200015001002c00128008000b01006774700020000280080001ca7f158b8f9ba1a400", @ANYRES32=r6, @ANYBLOB="14000800fe8000000000000000000000000000bb08000a0038"], 0x54}}, 0x24040088) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000540)={{0x2, 0x4e22, @multicast1}, {0x1, @random="ed3411052550"}, 0x10, {0x2, 0x4e24, @multicast2}, 'netpci0\x00'}) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x1f, "0a10a0d29c91fd3f838521052f297fc4aaaa6556ad54ebb7dfcae72e452c8c"}, &(0x7f0000000180)=0x43) 3.354348073s ago: executing program 5 (id=3333): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0xf) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000600)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc2b5a2c738431cd7, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x7c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x48, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x938}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x40}, 0x80, &(0x7f0000000080)}, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0x9, 0xfa11, 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x21800, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000900)="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", 0x134, 0x0) 3.311406671s ago: executing program 0 (id=3334): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xa40d, 0x1a9182) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x195180, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) writev(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000011000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xfce) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 3.19930166s ago: executing program 2 (id=3335): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@newlink={0x88, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x90022}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x72}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7ffffffe}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9a}]}}}, @IFLA_MASTER={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 3.19775739s ago: executing program 6 (id=3336): semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x8, 0x1800}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b397"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff0300"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000010b002e02000000000000000000", @ANYRES32=0x0, @ANYBLOB="1e02040000000000280012800b00010067656e657665000018000280080001000100000005000c0001000000040006001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 2.23680014s ago: executing program 2 (id=3337): r0 = socket(0x1, 0x5, 0x0) close(0x3) mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) r2 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc0405668, &(0x7f0000000040)={0x8, 0x100, 0xc, {0x2, 0x0, 0xfffffffe, 0x7}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x8b, 0x4, 0x8, 0x7, 0x1, 0x7f, 0x2, 0x0, 0x4, [0x3, 0x3, 0x10000, 0x1000000c, 0x1, 0x753, 0x6, 0x9]}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.158928919s ago: executing program 3 (id=3338): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x1, 0x1, [0xb5b, 0x4e1, 0xe4b, 0xa20]}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) dup(r6) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) recvmmsg(r3, &(0x7f0000007780), 0x0, 0x2100, &(0x7f0000007900)={0x0, 0x989680}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, r1, 0x0, 0xff, 0x1541}) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$kcm(0x29, 0x7, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.91131754s ago: executing program 2 (id=3339): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@newlink={0x88, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x90022}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x72}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9a}]}}}, @IFLA_MASTER={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/50, &(0x7f0000000080)=0x32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x1, 0x1, 0xe2, 0xee}, 0x10) 1.398864482s ago: executing program 2 (id=3340): socket$kcm(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0x3, 0x6}, {0x10, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7f, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x1c, 0xd, 0x1, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000019080)=ANY=[@ANYBLOB="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"], 0x8) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000019240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000019200)={&(0x7f00000191c0)={0x1c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x69}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x45) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.033179221s ago: executing program 5 (id=3341): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x800004000, 0x7f, 0xfa11}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000080), 0x75}, 0x48100) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)) getpriority(0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 631.044969ms ago: executing program 6 (id=3342): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 438.209827ms ago: executing program 6 (id=3343): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f80)=@newlink={0x80, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x90022}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x72}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9a}]}}}, @IFLA_MASTER={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 205.170075ms ago: executing program 0 (id=3344): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000ad4a0000dd0200000000f5ffffff000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c000000020000007f0000010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000200100000000000000000000000000000000000000000000000000000300000000000000fe880000000000000000000000000101000000003c00000002000000000000000000000000000096d60000000000ffffffff"], 0x23c}}, 0x0) 0s ago: executing program 6 (id=3345): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000005c0)=""/4127, 0x101f) r3 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0'}, 0xb) pwrite64(r3, &(0x7f0000000100)="b27cd432", 0x4, 0x1) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): ew USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 915.241187][ T29] usb 1-1: USB disconnect, device number 34 [ 915.254845][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.265431][T15732] bridge_slave_1: left allmulticast mode [ 915.271107][T15732] bridge_slave_1: left promiscuous mode [ 915.285116][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.289203][ T5908] usb 7-1: config 0 descriptor?? [ 915.304993][T17351] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 915.321321][T15732] bridge_slave_0: left allmulticast mode [ 915.328855][T15732] bridge_slave_0: left promiscuous mode [ 915.346614][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.428305][T15732] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 915.436830][T15732] ip6gre1 (unregistering): left promiscuous mode [ 915.499200][ T5917] mcp2221 0003:04D8:00DD.0037: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 915.700451][T15732] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 915.711633][T15732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.724810][T15732] bond0 (unregistering): Released all slaves [ 915.741422][T15732] bond1 (unregistering): Released all slaves [ 915.745118][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.756468][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.765767][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.773464][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.781015][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.799495][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.808969][T15732] bond2 (unregistering): Released all slaves [ 915.819484][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.828051][ T5908] koneplus 0003:1E7D:2E22.0038: unknown main item tag 0x0 [ 915.844765][T15732] bond3 (unregistering): Released all slaves [ 915.854204][ T5908] koneplus 0003:1E7D:2E22.0038: hidraw0: USB HID v7b.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0 [ 915.888564][T15732] bond4 (unregistering): Released all slaves [ 915.899901][ T796] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 915.916161][ T29] usb 6-1: USB disconnect, device number 36 [ 915.940903][T17351] fuse: Bad value for 'fd' [ 915.979262][ T5832] Bluetooth: hci2: command tx timeout [ 916.023433][ T5908] usb 7-1: USB disconnect, device number 16 [ 916.059680][T17364] fido_id[17364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 916.083784][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 916.100410][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.136843][ T796] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 916.166389][ T796] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 916.176612][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.190664][ T796] usb 1-1: Product: syz [ 916.213469][ T796] usb 1-1: Manufacturer: syz [ 916.225582][T15732] tipc: Left network mode [ 916.232425][ T796] usb 1-1: SerialNumber: syz [ 916.280344][ T796] usb 1-1: config 0 descriptor?? [ 916.832448][T17363] adutux: No device or device unplugged -19 [ 917.114052][T15732] hsr_slave_0: left promiscuous mode [ 917.129278][T15732] hsr_slave_1: left promiscuous mode [ 917.136470][T15732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.185943][T15732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.230937][T15732] pim6reg (unregistering): left allmulticast mode [ 917.857104][T17404] xt_hashlimit: overflow, try lower: 18446744073709551615/18446744073709551604 [ 918.014233][T15732] team0 (unregistering): Port device team_slave_1 removed [ 918.052505][ T5832] Bluetooth: hci2: command tx timeout [ 918.060948][T15732] team0 (unregistering): Port device team_slave_0 removed [ 918.122809][ T796] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 918.262743][ T796] usb 4-1: device descriptor read/64, error -71 [ 918.525543][ T796] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 918.614516][ T5908] usb 1-1: USB disconnect, device number 35 [ 918.662097][T17414] bridge0: port 3(vlan2) entered blocking state [ 918.668540][T17414] bridge0: port 3(vlan2) entered disabled state [ 918.692773][T17414] vlan2: entered allmulticast mode [ 918.701254][T17414] geneve0: entered allmulticast mode [ 918.704571][ T796] usb 4-1: device descriptor read/64, error -71 [ 918.727267][T17414] vlan2: entered promiscuous mode [ 918.767920][T17414] geneve0: entered promiscuous mode [ 918.838530][ T796] usb usb4-port1: attempt power cycle [ 918.888820][T17421] vivid-000: disconnect [ 918.930357][T17305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 919.000285][T17305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 919.020504][T17409] vivid-000: reconnect [ 919.064088][T17305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 919.095056][T17305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 919.112118][ T5908] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 919.141124][T15732] IPVS: stop unused estimator thread 0... [ 919.182493][ T796] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 919.233165][ T796] usb 4-1: device descriptor read/8, error -71 [ 919.272062][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 919.297710][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.336858][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.369239][ T5908] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 919.400189][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.427746][ T5908] usb 1-1: config 0 descriptor?? [ 919.445207][ T5908] pxrc 1-1:0.0: Could not find endpoint [ 919.456130][ T5908] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 919.466359][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.483431][ T796] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 919.499943][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.522919][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.524222][ T796] usb 4-1: device descriptor read/8, error -71 [ 919.530261][T12058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.576690][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.584022][T12058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.668268][ T5908] usb 1-1: USB disconnect, device number 36 [ 919.694593][ T796] usb usb4-port1: unable to enumerate USB device [ 919.721415][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.878345][T17305] veth0_vlan: entered promiscuous mode [ 919.937953][T17305] veth1_vlan: entered promiscuous mode [ 920.034001][T17305] veth0_macvtap: entered promiscuous mode [ 920.060587][T17305] veth1_macvtap: entered promiscuous mode [ 920.089509][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.150887][ T5832] Bluetooth: hci2: command tx timeout [ 920.161526][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.177910][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.228051][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.341527][T17455] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 920.462445][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.471641][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.369801][T15732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.480379][T15732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.541091][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 921.586642][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.639478][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.704185][T17479] team_slave_0 (unregistering): left allmulticast mode [ 921.733916][T17479] team0: Port device team_slave_0 removed [ 921.909955][ T5908] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 922.163673][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 922.176907][ T5892] hid-generic 0008:0091:0009.0039: reserved main item tag 0xd [ 922.192469][ T5892] hid-generic 0008:0091:0009.0039: item fetching failed at offset 28/32 [ 922.225039][ T5892] hid-generic 0008:0091:0009.0039: probe with driver hid-generic failed with error -22 [ 922.247455][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 922.265379][T17486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3034'. [ 922.306378][ T5908] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 922.425944][T17491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.781541][ T5908] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 922.845686][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.884214][ T5908] usb 6-1: Product: syz [ 922.888519][ T5908] usb 6-1: Manufacturer: syz [ 922.893589][ T5908] usb 6-1: SerialNumber: syz [ 922.930610][ T5908] usb 6-1: config 0 descriptor?? [ 922.944346][T17486] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3034'. [ 922.988526][T17478] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 923.138587][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 923.505468][T17481] hsr0: entered promiscuous mode [ 923.526201][T17493] hsr_slave_0: left promiscuous mode [ 923.599676][T17493] hsr_slave_1: left promiscuous mode [ 923.648578][T17493] hsr0 (unregistering): left promiscuous mode [ 923.697638][T17479] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 924.747168][ T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 925.061911][ T5908] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 925.093478][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 925.264248][ T5908] usb 1-1: device descriptor read/64, error -71 [ 925.296508][T17000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.386228][ T29] usb 3-1: config 0 has no interfaces? [ 925.402492][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 925.411650][ T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 925.424286][T17000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.433044][ T29] usb 3-1: Manufacturer: syz [ 925.442482][T17000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.450591][T17000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.472579][ T29] usb 3-1: config 0 descriptor?? [ 925.481056][T17000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.531979][ T5908] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 925.686982][ T29] usb 3-1: USB disconnect, device number 44 [ 925.701841][ T5908] usb 1-1: device descriptor read/64, error -71 [ 925.812991][ T5908] usb usb1-port1: attempt power cycle [ 925.898508][ T796] usb 6-1: USB disconnect, device number 37 [ 926.189423][ T5908] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 926.261499][ T5908] usb 1-1: device descriptor read/8, error -71 [ 926.523911][ T5908] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 926.587756][ T5908] usb 1-1: device descriptor read/8, error -71 [ 926.702230][T17517] chnl_net:caif_netlink_parms(): no params data found [ 926.722604][ T5908] usb usb1-port1: unable to enumerate USB device [ 927.052064][T17517] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.060084][T17517] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.067760][T17517] bridge_slave_0: entered allmulticast mode [ 927.081886][T17517] bridge_slave_0: entered promiscuous mode [ 927.090881][T17517] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.100366][T17517] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.107923][T17517] bridge_slave_1: entered allmulticast mode [ 927.124808][T17517] bridge_slave_1: entered promiscuous mode [ 927.491028][T17517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.535622][ T5917] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 927.557926][T17517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.572069][ T5832] Bluetooth: hci1: command tx timeout [ 927.699732][ T5917] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 927.733933][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.794365][ T5917] usb 3-1: config 0 descriptor?? [ 927.802684][T17517] team0: Port device team_slave_0 added [ 927.825266][ T5917] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 927.833386][T17517] team0: Port device team_slave_1 added [ 927.989227][T17517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.999832][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.040840][T17517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.072976][T17517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.080784][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.108821][T17517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.224105][T17517] hsr_slave_0: entered promiscuous mode [ 928.233059][T17517] hsr_slave_1: entered promiscuous mode [ 928.236788][ T5917] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 928.412546][ T29] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 928.467975][T17517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.481173][T17517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.499995][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.525075][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.550407][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.555352][ T29] usb 6-1: device descriptor read/64, error -71 [ 928.602393][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.648381][T17517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.659446][T17517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.768806][T17517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.782555][T17517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.822813][ T29] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 928.847612][ T5917] gspca_cpia1: usb_control_msg 02, error -32 [ 928.869065][ T5917] gspca_cpia1: usb_control_msg 02, error -71 [ 928.878944][ T5917] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 928.898765][T17552] input: syz1 as /devices/virtual/input/input52 [ 928.907462][ T5917] usb 3-1: USB disconnect, device number 45 [ 928.955211][ T5908] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 928.962118][ T29] usb 6-1: device descriptor read/64, error -71 [ 929.095022][ T29] usb usb6-port1: attempt power cycle [ 929.144983][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.183990][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.208100][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 929.227866][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 929.249118][ T5908] usb 1-1: SerialNumber: syz [ 929.284964][T17517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 929.329104][T17517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 929.355972][T17517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 929.416920][T17517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 929.467238][ T29] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 929.504963][ T5908] usb 1-1: 0:2 : does not exist [ 929.520596][ T29] usb 6-1: device descriptor read/8, error -71 [ 929.653556][ T5832] Bluetooth: hci1: command tx timeout [ 929.668119][ T5908] usb 1-1: USB disconnect, device number 41 [ 929.714323][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.812911][ T29] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 929.830471][T17517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.856397][ T29] usb 6-1: device descriptor read/8, error -71 [ 929.911447][T17517] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.968599][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.975815][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.985806][ T29] usb usb6-port1: unable to enumerate USB device [ 930.014615][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.021908][T15732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.145064][T17517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.230143][T17517] veth0_vlan: entered promiscuous mode [ 930.246890][T17517] veth1_vlan: entered promiscuous mode [ 930.311185][T17517] veth0_macvtap: entered promiscuous mode [ 930.324801][T17517] veth1_macvtap: entered promiscuous mode [ 930.355148][T17517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.439132][T17589] netlink: 'syz.0.3053': attribute type 13 has an invalid length. [ 930.483555][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 930.823258][T17517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.835101][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3055'. [ 930.850329][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.863654][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.214005][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.262968][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.332465][ T5917] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 931.363055][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.582820][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 931.608447][ T5917] usb 3-1: config 0 has no interfaces? [ 931.645777][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 931.746556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.753705][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.763315][ T5832] Bluetooth: hci1: command tx timeout [ 931.771946][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.842571][ T5917] usb 3-1: Manufacturer: syz [ 932.043633][ T5917] usb 3-1: config 0 descriptor?? [ 932.202162][T17612] syzkaller0: entered promiscuous mode [ 932.215478][T17612] syzkaller0: entered allmulticast mode [ 932.385571][T17597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.810893][T17620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3060'. [ 933.419854][ T5887] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 933.589235][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 933.607606][ T5887] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.640298][ T5887] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.666299][ T5887] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.693858][ T5887] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 933.711367][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 933.730112][ T5887] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 933.755877][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.780703][ T5887] usb 7-1: config 0 descriptor?? [ 933.827302][ T5832] Bluetooth: hci1: command tx timeout [ 934.293882][ T5887] uclogic 0003:5543:0781.003A: item fetching failed at offset 5/7 [ 934.303995][ T5887] uclogic 0003:5543:0781.003A: parse failed [ 934.321911][ T5887] uclogic 0003:5543:0781.003A: probe with driver uclogic failed with error -22 [ 936.011314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.035505][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.180318][ T5908] usb 3-1: USB disconnect, device number 46 [ 936.237677][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.248460][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.284766][ T5917] usb 7-1: USB disconnect, device number 17 [ 936.485459][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'. [ 936.651890][ T5908] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 936.694007][T17639] tmpfs: Unknown parameter 'fd' [ 936.841892][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 936.850393][ T5908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 936.897233][T17628] netlink: 'syz.5.3062': attribute type 10 has an invalid length. [ 936.900838][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.949096][T17628] xfrm0: entered allmulticast mode [ 936.956390][T17628] team0: Device xfrm0 is of different type [ 936.967117][ T5908] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 936.989083][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.007487][ T5908] usb 1-1: Product: syz [ 937.022418][ T5908] usb 1-1: Manufacturer: syz [ 937.027082][ T5908] usb 1-1: SerialNumber: syz [ 937.099132][T17000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.116112][T17000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.132317][ T5887] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 937.140616][T17000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.148905][T17000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.158828][T17000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.259969][ T5917] usb 1-1: USB disconnect, device number 42 [ 937.307683][ T5887] usb 3-1: device descriptor read/64, error -71 [ 937.561850][ T5887] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 937.703810][ T5887] usb 3-1: device descriptor read/64, error -71 [ 937.789714][ T9923] syz_tun (unregistering): left promiscuous mode [ 937.842211][ T5887] usb usb3-port1: attempt power cycle [ 937.997563][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.040356][T17648] chnl_net:caif_netlink_parms(): no params data found [ 938.118588][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.212035][ T5887] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 938.263720][T17663] sg_write: data in/out 435166/674 bytes for SCSI command 0x0-- guessing data in; [ 938.263720][T17663] program syz.0.3073 not setting count and/or reply_len properly [ 938.294250][ T5887] usb 3-1: device descriptor read/8, error -71 [ 938.496221][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.542756][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 938.548795][T17666] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3074'. [ 938.550833][ T5887] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 938.618363][ T5887] usb 3-1: device descriptor read/8, error -71 [ 938.724722][ T12] team0: Port device netdevsim0 removed [ 938.733821][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.744321][ T5887] usb usb3-port1: unable to enumerate USB device [ 938.750908][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 938.760084][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.784571][ T10] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 938.794166][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.837771][ T10] usb 1-1: Product: syz [ 938.864997][ T10] usb 1-1: Manufacturer: syz [ 938.869628][ T10] usb 1-1: SerialNumber: syz [ 938.922648][ T10] usb 1-1: config 0 descriptor?? [ 938.993628][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.027716][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.050480][T17648] bridge_slave_0: entered allmulticast mode [ 939.066731][T17648] bridge_slave_0: entered promiscuous mode [ 939.087402][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.104806][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.119721][T17648] bridge_slave_1: entered allmulticast mode [ 939.135605][T17648] bridge_slave_1: entered promiscuous mode [ 939.153593][ T5887] usb 1-1: USB disconnect, device number 43 [ 939.253244][ T5832] Bluetooth: hci4: command tx timeout [ 939.315740][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.330104][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.391198][T17648] team0: Port device team_slave_0 added [ 939.403109][T17648] team0: Port device team_slave_1 added [ 939.452525][ T12] vlan2: left allmulticast mode [ 939.457669][ T12] geneve0: left allmulticast mode [ 939.463810][ T12] vlan2: left promiscuous mode [ 939.468956][ T12] geneve0: left promiscuous mode [ 939.474975][ T12] bridge0: port 3(vlan2) entered disabled state [ 939.483933][ T12] bridge_slave_1: left allmulticast mode [ 939.489665][ T12] bridge_slave_1: left promiscuous mode [ 939.496775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.511934][ T12] bridge_slave_0: left allmulticast mode [ 939.517875][ T12] bridge_slave_0: left promiscuous mode [ 939.524483][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.773989][T17683] tmpfs: Unknown parameter 'fd' [ 939.891184][T17687] misc userio: Invalid payload size [ 939.903561][T17687] misc userio: No port type given on /dev/userio [ 940.288835][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.306320][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.319357][ T12] bond0 (unregistering): Released all slaves [ 940.334168][ T12] bond1 (unregistering): Released all slaves [ 940.393452][ T12] bond2 (unregistering): Released all slaves [ 940.432876][ T12] bond3 (unregistering): Released all slaves [ 940.464186][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.478686][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.535720][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.575544][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.607738][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.654997][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.766548][T17685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 940.819678][ T12] m>e5n: left promiscuous mode [ 940.959136][ T12] hmaÓË224): left promiscuous mode [ 941.149304][T17648] hsr_slave_0: entered promiscuous mode [ 941.179824][T17648] hsr_slave_1: entered promiscuous mode [ 941.199232][T17648] debugfs: 'hsr0' already exists in 'hsr' [ 941.217505][T17648] Cannot create hsr debugfs directory [ 941.232665][ T12] tipc: Disabling bearer [ 941.241155][ T12] tipc: Disabling bearer [ 941.256883][ T5892] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 941.260017][T17704] syzkaller0: entered promiscuous mode [ 941.270394][ T12] tipc: Left network mode [ 941.275001][T17704] syzkaller0: entered allmulticast mode [ 941.332790][ T5832] Bluetooth: hci4: command tx timeout [ 941.434171][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 941.442560][ T5892] usb 3-1: config 0 has no interface number 0 [ 941.509871][ T5892] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 941.541714][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.572472][ T5892] usb 3-1: Product: syz [ 941.593897][ T5892] usb 3-1: Manufacturer: syz [ 941.604185][ T5892] usb 3-1: SerialNumber: syz [ 941.617903][ T5892] usb 3-1: config 0 descriptor?? [ 941.778540][T17710] usb usb8: usbfs: process 17710 (syz.3.3086) did not claim interface 0 before use [ 941.841198][ T5892] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 941.905012][ T5892] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 941.924664][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 941.938089][ T5892] usb 3-1: media controller created [ 942.013531][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.222387][T17722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.231235][T17722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.394823][T17720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.450790][T17720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.989406][ T12] batadv0: left promiscuous mode [ 943.035401][ T12] hsr_slave_0: left promiscuous mode [ 943.054149][ T12] hsr_slave_1: left promiscuous mode [ 943.082883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.100840][ T5892] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 943.109942][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.180521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.224371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.297528][ T5892] usb 3-1: USB disconnect, device number 51 [ 943.317080][ T12] veth1_macvtap: left promiscuous mode [ 943.330443][ T12] veth0_macvtap: left promiscuous mode [ 943.350343][ T12] veth1_vlan: left promiscuous mode [ 943.365116][ T12] veth0_vlan: left promiscuous mode [ 943.367822][T17738] tmpfs: Unknown parameter 'fd' [ 943.412910][ T5832] Bluetooth: hci4: command tx timeout [ 943.522732][ T5887] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 943.602782][ T5917] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 943.762882][ T5917] usb 6-1: device descriptor read/64, error -71 [ 943.811131][ T5887] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 943.857203][ T12] team0 (unregistering): Port device team_slave_1 removed [ 943.860939][ T5887] usb 4-1: config 0 has no interfaces? [ 943.903220][ T5887] usb 4-1: config 0 has no interfaces? [ 943.910892][ T5887] usb 4-1: config 0 has no interfaces? [ 943.917865][ T5887] usb 4-1: config 0 has no interfaces? [ 943.925307][ T5887] usb 4-1: config 0 has no interfaces? [ 943.935528][ T5887] usb 4-1: config 0 has no interfaces? [ 943.950140][ T5887] usb 4-1: config 0 has no interfaces? [ 943.961083][ T5887] usb 4-1: config 0 has no interfaces? [ 943.969754][ T5887] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.979861][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.988544][ T5887] usb 4-1: Product: syz [ 943.993257][ T5887] usb 4-1: Manufacturer: syz [ 943.998117][ T5887] usb 4-1: SerialNumber: syz [ 944.007717][ T12] team0 (unregistering): Port device team_slave_0 removed [ 944.018657][ T5887] usb 4-1: config 0 descriptor?? [ 944.024080][ T5917] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 944.162511][ T5917] usb 6-1: device descriptor read/64, error -71 [ 944.302538][T17734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.302543][ T5917] usb usb6-port1: attempt power cycle [ 944.319655][T17734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.332662][ T5887] usb 4-1: USB disconnect, device number 53 [ 944.662435][ T5917] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 944.693196][ T5917] usb 6-1: device descriptor read/8, error -71 [ 944.932480][ T5917] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 944.963159][ T5917] usb 6-1: device descriptor read/8, error -71 [ 945.017921][T17757] misc userio: Invalid payload size [ 945.028175][T17757] misc userio: No port type given on /dev/userio [ 945.035040][ T5887] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 945.087633][ T5917] usb usb6-port1: unable to enumerate USB device [ 945.277883][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 945.289947][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 945.392980][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 945.418369][ T5887] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 945.438437][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.482926][ T5887] usb 4-1: Product: syz [ 945.492382][ T5832] Bluetooth: hci4: command tx timeout [ 945.539681][ T5887] usb 4-1: Manufacturer: syz [ 945.574565][ T5887] usb 4-1: SerialNumber: syz [ 945.596598][ T5887] usb 4-1: config 0 descriptor?? [ 945.619730][ T5887] adutux 4-1:0.0: interrupt endpoints not found [ 945.653255][T17648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 945.861656][ T5887] usb 4-1: USB disconnect, device number 54 [ 945.908694][T17648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 945.953159][T17648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 946.027319][T17648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 946.577290][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.686168][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.733246][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.740487][T15732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.776458][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.783650][T15732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.870112][T17648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.918885][T17648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.988884][T17648] veth0_vlan: entered promiscuous mode [ 947.008279][T17648] veth1_vlan: entered promiscuous mode [ 947.042089][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3096'. [ 947.142733][T17790] tmpfs: Unknown parameter 'fd' [ 947.437789][T17797] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 947.520129][T17648] veth0_macvtap: entered promiscuous mode [ 947.581230][T17648] veth1_macvtap: entered promiscuous mode [ 947.691282][T17648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.925810][T17648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.992641][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.052950][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.138597][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.175683][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.412858][ T5892] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 948.468569][T17816] netlink: 'syz.5.3107': attribute type 2 has an invalid length. [ 948.479555][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.514309][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.604426][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 948.618102][ T5892] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 948.642874][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.650938][ T5892] usb 4-1: Product: syz [ 948.695423][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.710828][ T5892] usb 4-1: Manufacturer: syz [ 948.720624][T17820] misc userio: Invalid payload size [ 948.752576][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.765301][T17820] misc userio: No port type given on /dev/userio [ 948.791601][ T5892] usb 4-1: SerialNumber: syz [ 948.820454][ T5892] usb 4-1: config 0 descriptor?? [ 949.066269][ T5892] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 949.489827][T17837] tmpfs: Unknown parameter 'fd' [ 949.501873][ T5887] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 949.713846][ T5887] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 949.731944][ T5892] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 949.770546][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 949.807577][ T5892] usb 4-1: USB disconnect, device number 55 [ 949.815205][ T5887] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 949.845537][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 949.902266][ T5887] usb 7-1: Product: syz [ 949.906507][ T5887] usb 7-1: Manufacturer: syz [ 949.948331][ T5887] usb 7-1: SerialNumber: syz [ 949.980150][T17000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 949.999054][T17000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 950.010510][T17000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 950.023023][ T5887] usb 7-1: config 0 descriptor?? [ 950.029839][T17000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 950.042649][T17000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 950.054069][T17830] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 950.067461][ T5887] usb 7-1: selecting invalid altsetting 0 [ 950.394432][T17830] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 950.772136][ T5887] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 950.833094][T16100] bond0: (slave syz_tun): Releasing backup interface [ 950.872853][ T5908] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 950.951850][ T5887] usb 4-1: device descriptor read/64, error -71 [ 951.053207][ T5908] usb 6-1: not running at top speed; connect to a high speed hub [ 951.067081][ T5908] usb 6-1: config 2 has an invalid interface number: 155 but max is 3 [ 951.086678][ T129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.103397][ T5908] usb 6-1: config 2 has an invalid interface number: 131 but max is 3 [ 951.124969][ T5908] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 951.136995][ T129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.152898][ T5908] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 951.170727][ T5908] usb 6-1: config 2 has an invalid interface number: 144 but max is 3 [ 951.180916][ T5908] usb 6-1: config 2 has an invalid interface number: 133 but max is 3 [ 951.207141][ T5908] usb 6-1: config 2 has an invalid interface number: 196 but max is 3 [ 951.224362][ T5908] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 951.233279][ T5887] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 951.266614][ T5908] usb 6-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 951.302770][ T5908] usb 6-1: config 2 has no interface number 0 [ 951.308944][ T5908] usb 6-1: config 2 has no interface number 1 [ 951.328588][ T129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.345494][ T5908] usb 6-1: config 2 has no interface number 2 [ 951.351651][ T5908] usb 6-1: config 2 has no interface number 3 [ 951.361423][ T129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.371909][ T5908] usb 6-1: config 2 has no interface number 4 [ 951.378102][ T5908] usb 6-1: config 2 interface 155 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 951.390276][ T5887] usb 4-1: device descriptor read/64, error -71 [ 951.410701][T17848] chnl_net:caif_netlink_parms(): no params data found [ 951.418444][ T5908] usb 6-1: config 2 interface 155 altsetting 0 endpoint 0x6 has invalid maxpacket 96, setting to 64 [ 951.448183][ T5908] usb 6-1: config 2 interface 155 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 951.469753][ T5908] usb 6-1: config 2 interface 131 altsetting 1 endpoint 0x5 has invalid maxpacket 1015, setting to 64 [ 951.493371][ T5908] usb 6-1: config 2 interface 131 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 951.504208][ T5908] usb 6-1: config 2 interface 131 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 951.515519][ T5887] usb usb4-port1: attempt power cycle [ 951.523969][ T129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.535761][ T5908] usb 6-1: config 2 interface 144 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 951.546800][ T129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.562067][ T5908] usb 6-1: config 2 interface 144 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 951.603730][ T5908] usb 6-1: too many endpoints for config 2 interface 133 altsetting 176: 149, using maximum allowed: 30 [ 951.625206][T17878] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 951.632014][T17878] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 951.641194][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0x1, skipping [ 951.652346][ T5908] usb 6-1: config 2 interface 133 altsetting 176 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 951.663571][T17878] vhci_hcd vhci_hcd.0: Device attached [ 951.669264][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0x5, skipping [ 951.681587][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0x6, skipping [ 951.692648][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0xF, skipping [ 951.703757][ T5908] usb 6-1: config 2 interface 133 altsetting 176 endpoint 0x9 has invalid maxpacket 1568, setting to 64 [ 951.713318][T17878] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 951.721533][T17878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 951.730019][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0x1, skipping [ 951.742958][ T5908] usb 6-1: config 2 interface 133 altsetting 176 endpoint 0x2 has invalid maxpacket 1184, setting to 64 [ 951.754244][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has a duplicate endpoint with address 0x6, skipping [ 951.765272][ T5908] usb 6-1: config 2 interface 133 altsetting 176 has 10 endpoint descriptors, different from the interface descriptor's value: 149 [ 951.780006][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 951.787673][T17878] vhci_hcd vhci_hcd.0: Device attached [ 951.791079][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 951.807300][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 951.818362][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 951.829139][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 951.846998][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 951.857896][T17885] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 951.864545][T17885] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 951.873556][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 951.888920][ T129] team0: Port device netdevsim0 removed [ 951.897721][T17885] vhci_hcd vhci_hcd.0: Device attached [ 951.900986][ T129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.906441][ T5887] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 951.919201][ T129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.924027][T17878] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 951.939623][T17878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 951.950346][ T5908] usb 6-1: config 2 interface 196 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 951.961930][ T5908] usb 6-1: config 2 interface 131 has no altsetting 0 [ 951.968994][T17878] vhci_hcd vhci_hcd.0: Device attached [ 951.974666][ T5892] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 951.983261][ T5887] usb 4-1: device descriptor read/8, error -71 [ 951.989905][ T5908] usb 6-1: config 2 interface 144 has no altsetting 0 [ 952.000971][T17885] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 952.007627][T17885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 952.015496][ T5908] usb 6-1: config 2 interface 133 has no altsetting 0 [ 952.024873][ T5908] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=28.2e [ 952.034399][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.043486][ T5908] usb 6-1: Product: በ[ 952.047873][ T5908] usb 6-1: Manufacturer: Ћ [ 952.049003][T17885] vhci_hcd vhci_hcd.0: Device attached [ 952.058341][ T5908] usb 6-1: SerialNumber: 閛㘾䃻̸戉稺℠é™ïŽ˜îŠä¥žç©”ëœçœ„藶賊룆ꄵ䜊两Ӹ훂鬷 [ 952.079907][T17894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 952.098133][T17878] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 952.104818][T17878] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 952.116282][T17878] vhci_hcd vhci_hcd.0: Device attached [ 952.133650][ T5832] Bluetooth: hci5: command tx timeout [ 952.136823][T17878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 952.161859][T17878] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(28) [ 952.168542][T17878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 952.183706][T17878] vhci_hcd vhci_hcd.0: Device attached [ 952.191066][T17878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 952.234614][T17848] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.241964][ T5887] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 952.252320][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.259982][T17848] bridge_slave_0: entered allmulticast mode [ 952.267661][ T5887] usb 4-1: device descriptor read/8, error -71 [ 952.275034][T17897] vhci_hcd: connection closed [ 952.276966][T17888] vhci_hcd: connection closed [ 952.278485][T17882] vhci_hcd: connection closed [ 952.283520][T17886] vhci_hcd: connection closed [ 952.291394][T17890] vhci_hcd: connection closed [ 952.300767][T17848] bridge_slave_0: entered promiscuous mode [ 952.306321][T17895] vhci_hcd: connection closed [ 952.313949][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.326706][T17848] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.334207][T17879] vhci_hcd: connection reset by peer [ 952.340150][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.346622][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.362438][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.368507][ T5901] usb 7-1: USB disconnect, device number 18 [ 952.371523][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.395282][ T5887] usb usb4-port1: unable to enumerate USB device [ 952.408583][T17848] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.418056][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.436399][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.448186][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.458544][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.465746][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.471094][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.488066][T17848] bridge_slave_1: entered allmulticast mode [ 952.493777][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.507157][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.509878][T17848] bridge_slave_1: entered promiscuous mode [ 952.526872][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.558147][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.574507][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.588999][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.603373][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.613783][ T12] vhci_hcd vhci_hcd.2: stop threads [ 952.623524][ T12] vhci_hcd vhci_hcd.2: release socket [ 952.640006][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 952.643583][ T5908] usb 6-1: USB disconnect, device number 46 [ 952.667691][T17848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.743689][T17848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.797562][T17848] team0: Port device team_slave_0 added [ 952.807102][T17848] team0: Port device team_slave_1 added [ 952.863967][T17848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.878921][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.908208][T17848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.948935][T17848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.956378][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.984194][T17848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.099566][ T129] bridge_slave_0: left allmulticast mode [ 953.107101][ T129] bridge_slave_0: left promiscuous mode [ 953.127747][ T129] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.243228][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.254924][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.282482][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.311276][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.324729][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.336039][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3123'. [ 953.481609][ T129] bond2 (unregistering): (slave gretap1): Releasing active interface [ 953.592497][ T5917] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 953.616224][ T129] batman_adv: batadv0: Removing interface: vlan2 [ 953.710108][ T129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.722470][ T5917] usb 6-1: device descriptor read/64, error -71 [ 953.724916][ T129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.756636][ T129] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 953.769699][ T129] bond0 (unregistering): Released all slaves [ 953.787238][ T129] bond1 (unregistering): Released all slaves [ 953.808803][ T129] bond2 (unregistering): Released all slaves [ 953.827363][ T129] bond3 (unregistering): (slave bond4): Releasing backup interface [ 953.841372][ T129] bond4 (unregistering): left promiscuous mode [ 953.849178][ T129] bond3 (unregistering): Released all slaves [ 953.867965][ T129] bond4 (unregistering): Released all slaves [ 953.885834][ T129] bond5 (unregistering): Released all slaves [ 953.930465][ T129] bond6 (unregistering): Released all slaves [ 953.962854][T17848] hsr_slave_0: entered promiscuous mode [ 953.969386][T17848] hsr_slave_1: entered promiscuous mode [ 953.976287][T17848] debugfs: 'hsr0' already exists in 'hsr' [ 953.982113][T17848] Cannot create hsr debugfs directory [ 953.983971][ T5917] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 954.142451][ T5917] usb 6-1: device descriptor read/64, error -71 [ 954.178539][ T129] tipc: Left network mode [ 954.212018][ T5832] Bluetooth: hci5: command tx timeout [ 954.274049][ T5917] usb usb6-port1: attempt power cycle [ 954.294478][ T129] IPVS: stopping backup sync thread 15059 ... [ 954.673905][ T5917] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 954.704957][ T5917] usb 6-1: device descriptor read/8, error -71 [ 954.952463][ T5917] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 955.014813][ T5917] usb 6-1: device descriptor read/8, error -71 [ 955.153367][ T5917] usb usb6-port1: unable to enumerate USB device [ 955.372041][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.413583][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 955.434275][ T129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.477429][ T129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.512177][ T129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.550932][ T129] veth1_macvtap: left promiscuous mode [ 955.563807][ T129] veth0_macvtap: left promiscuous mode [ 955.840047][T17962] random: crng reseeded on system resumption [ 955.906428][ T129] team0 (unregistering): Port device batadv1 removed [ 956.084841][ T129] team0 (unregistering): Port device team_slave_1 removed [ 956.106525][ T129] team0 (unregistering): Port device team_slave_0 removed [ 956.132442][T17069] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 956.292087][ T5832] Bluetooth: hci5: command tx timeout [ 956.322639][T17069] usb 7-1: Using ep0 maxpacket: 32 [ 956.344235][T17069] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 956.354404][T17069] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.371342][T17965] binder: BINDER_SET_CONTEXT_MGR already set [ 956.379095][T17965] binder: 17964:17965 ioctl 4018620d 200000000040 returned -16 [ 956.390789][T17069] usb 7-1: config 0 has no interface number 0 [ 956.397813][T17069] usb 7-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 956.415082][T17069] usb 7-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 956.429412][T17069] usb 7-1: config 0 interface 8 has no altsetting 0 [ 956.440093][T17069] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 956.492803][T17069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.501117][T17069] usb 7-1: Product: syz [ 956.506331][T17069] usb 7-1: Manufacturer: syz [ 956.511083][T17069] usb 7-1: SerialNumber: syz [ 956.529653][T17069] usb 7-1: config 0 descriptor?? [ 956.866553][T17848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.939035][T17848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.961191][T17069] ath6kl: Failed to submit usb control message: -71 [ 956.980856][T17069] ath6kl: unable to send the bmi data to the device: -71 [ 956.995560][T17069] ath6kl: Unable to send get target info: -71 [ 957.004925][T17069] ath6kl: Failed to init ath6kl core: -71 [ 957.013183][T17069] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 957.031387][T17848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.061178][T17069] usb 7-1: USB disconnect, device number 19 [ 957.082833][ T5892] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 957.125221][T17848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.213772][ T129] IPVS: stop unused estimator thread 0... [ 957.660978][T17848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.744609][T17848] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.805105][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 957.847448][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.854741][T12058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.920085][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.927346][T12058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.997257][T18009] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 958.291013][T18024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.356484][T17848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.372638][ T5832] Bluetooth: hci5: command tx timeout [ 958.387053][T10192] usb usb38-port1: attempt power cycle [ 958.661839][ T10] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 958.760205][T17848] veth0_vlan: entered promiscuous mode [ 958.837572][T17848] veth1_vlan: entered promiscuous mode [ 958.995613][T18039] netlink: 'syz.3.3149': attribute type 9 has an invalid length. [ 959.005040][T17848] veth0_macvtap: entered promiscuous mode [ 959.025729][T10192] usb usb38-port1: unable to enumerate USB device [ 959.046139][T18039] netlink: 'syz.3.3149': attribute type 11 has an invalid length. [ 959.061414][T17848] veth1_macvtap: entered promiscuous mode [ 959.097835][T18039] netlink: 'syz.3.3149': attribute type 12 has an invalid length. [ 959.132602][T18039] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3149'. [ 959.147178][T17848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.196155][T18042] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 959.217250][T17848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.296160][ T1340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.337787][ T1340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.421088][ T1340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.481520][ T1340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.564222][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 959.662147][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 959.703766][ T10] usb 3-1: can't read configurations, error -71 [ 959.897789][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.947221][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.959771][T18054] netlink: 'syz.5.3153': attribute type 27 has an invalid length. [ 960.046364][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.065473][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.241920][ T5901] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 960.269418][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'. [ 960.391860][ T5901] usb 6-1: device descriptor read/64, error -71 [ 960.646096][ T5901] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 960.782231][ T5901] usb 6-1: device descriptor read/64, error -71 [ 960.902277][ T5901] usb usb6-port1: attempt power cycle [ 961.061956][T10192] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 961.203252][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 961.234609][T10192] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.251942][ T5901] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 961.266236][T10192] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 961.285798][T10192] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 961.298317][T10192] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 961.309333][T10192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.318500][ T5901] usb 6-1: device descriptor read/8, error -71 [ 961.328470][T18074] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 961.351913][ T10] usb 4-1: device descriptor read/64, error -71 [ 961.361716][T10192] hub 7-1:1.0: bad descriptor, ignoring hub [ 961.371359][T10192] hub 7-1:1.0: probe with driver hub failed with error -5 [ 961.393239][T10192] cdc_wdm 7-1:1.0: skipping garbage [ 961.398513][T10192] cdc_wdm 7-1:1.0: skipping garbage [ 961.416593][T10192] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 961.422961][T10192] cdc_wdm 7-1:1.0: Unknown control protocol [ 961.433543][ T5892] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 961.582286][ T5901] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 961.594415][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 961.606458][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 961.618753][ T5901] usb 6-1: device descriptor read/8, error -71 [ 961.627480][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 961.637315][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 961.657831][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 961.664554][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 961.670774][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 961.694729][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.716196][ T5892] usb 1-1: config 0 descriptor?? [ 961.763477][ T5901] usb usb6-port1: unable to enumerate USB device [ 961.781878][ T10] usb 4-1: device descriptor read/64, error -71 [ 961.892512][ T10] usb usb4-port1: attempt power cycle [ 961.905498][T18088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.918693][T18088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.944251][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 961.950931][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 961.957290][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 961.963929][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 961.970310][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 961.976950][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 961.983372][T17069] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 961.985075][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 961.997601][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.004689][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 962.011343][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.017722][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 962.024368][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.030657][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 962.037309][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.043606][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 962.050250][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.056681][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 962.063334][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 962.243206][T17069] usb 3-1: device descriptor read/64, error -71 [ 962.362262][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 962.370510][ T5908] usb 7-1: USB disconnect, device number 20 [ 962.392624][ T10] usb 4-1: device descriptor read/8, error -71 [ 962.550166][T17069] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 962.692486][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 962.704595][T17069] usb 3-1: device descriptor read/64, error -71 [ 962.713663][ T10] usb 4-1: device descriptor read/8, error -71 [ 962.774405][ T5892] ath6kl: Failed to submit usb control message: -110 [ 962.785860][ T5892] ath6kl: unable to send the bmi data to the device: -110 [ 962.797131][ T5892] ath6kl: Unable to send get target info: -110 [ 962.807184][ T5892] ath6kl: Failed to init ath6kl core: -110 [ 962.814656][T17069] usb usb3-port1: attempt power cycle [ 962.828436][ T5892] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 962.832985][ T10] usb usb4-port1: unable to enumerate USB device [ 963.162842][T17069] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 963.183494][T17069] usb 3-1: device descriptor read/8, error -71 [ 963.435294][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 963.435294][T17069] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 963.454217][T17069] usb 3-1: device descriptor read/8, error -71 [ 963.562949][T17069] usb usb3-port1: unable to enumerate USB device [ 963.903962][ T10] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 963.912856][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.928866][ T10] usb 6-1: config 0 has no interface number 0 [ 963.947112][ T10] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 964.016003][ T10] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.071108][ T10] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 964.089868][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.116853][ T10] usb 6-1: Product: syz [ 964.128172][ T10] usb 6-1: Manufacturer: syz [ 964.138939][ T10] usb 6-1: SerialNumber: syz [ 964.285630][ T10] usb 6-1: config 0 descriptor?? [ 965.404764][T17069] usb 1-1: USB disconnect, device number 44 [ 965.638276][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3168'. [ 965.669033][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3168'. [ 965.728316][T18119] netlink: 'syz.0.3168': attribute type 1 has an invalid length. [ 965.784550][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3168'. [ 965.943093][T17069] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 966.076177][ T10] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 966.113428][T17069] usb 7-1: Using ep0 maxpacket: 16 [ 966.140466][ T10] usb 6-1: USB disconnect, device number 55 [ 966.161477][T17069] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.222429][T17069] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.260350][T17069] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 966.322507][T17069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.367517][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3173'. [ 966.393435][T17069] usb 7-1: Product: syz [ 966.408726][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3172'. [ 966.434543][T17069] usb 7-1: Manufacturer: syz [ 966.455064][T17069] usb 7-1: SerialNumber: syz [ 966.698519][T17069] usb 7-1: 0:2 : does not exist [ 966.839449][T17069] usb 7-1: USB disconnect, device number 21 [ 966.909067][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.941919][T10192] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 967.113635][T10192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.142279][T10192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 967.178536][T10192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 967.242521][T10192] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 967.275949][T10192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.305579][T18133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 967.344811][T10192] hub 4-1:1.0: bad descriptor, ignoring hub [ 967.350824][T10192] hub 4-1:1.0: probe with driver hub failed with error -5 [ 967.398652][T10192] cdc_wdm 4-1:1.0: skipping garbage [ 967.426976][T10192] cdc_wdm 4-1:1.0: skipping garbage [ 967.447332][T10192] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 967.465052][T10192] cdc_wdm 4-1:1.0: Unknown control protocol [ 967.479305][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3178'. [ 967.513230][T18140] batman_adv: batadv0: Adding interface: dummy0 [ 967.519546][T18140] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.586825][T18140] batman_adv: batadv0: Interface activated: dummy0 [ 967.642211][ C1] wdm_int_callback: 686 callbacks suppressed [ 967.642242][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 967.655037][ C1] wdm_int_callback: 686 callbacks suppressed [ 967.655063][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 967.906369][T18143] batadv0: mtu less than device minimum [ 967.960419][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.972886][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.984755][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 967.996554][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.007910][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.019695][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.031560][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.043440][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.055291][T18143] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 968.093921][ T5917] usb 4-1: USB disconnect, device number 64 [ 968.134924][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 968.134944][ T30] audit: type=1326 audit(1774911415.103:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.6.3179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cca99c819 code=0x0 [ 968.528628][T18147] pim6reg: entered allmulticast mode [ 968.839187][T18156] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3181'. [ 968.871841][T10192] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 969.031462][T18158] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3182'. [ 969.047168][T10192] usb 3-1: Using ep0 maxpacket: 16 [ 969.063728][T10192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.089813][T10192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.121945][T10192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 969.123221][ T5892] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 969.174643][T10192] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 969.201840][T10192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.241195][T10192] usb 3-1: config 0 descriptor?? [ 969.312488][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 969.319982][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.354630][ T5892] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 969.387036][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.422411][ T5892] usb 4-1: Product: syz [ 969.436263][ T5892] usb 4-1: Manufacturer: syz [ 969.451555][ T5892] usb 4-1: SerialNumber: syz [ 969.485673][ T5892] usb 4-1: config 0 descriptor?? [ 969.514276][ T5892] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 969.642438][ T5917] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 969.834574][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.930311][T10192] usbhid 3-1:0.0: can't add hid device: -71 [ 969.938464][T10192] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 969.949157][T10192] usb 3-1: USB disconnect, device number 58 [ 969.965495][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.013744][ T5917] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 970.032597][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 970.055315][ T5917] usb 1-1: SerialNumber: syz [ 970.112057][T18173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3181'. [ 970.304744][ T5917] usb 1-1: 0:2 : does not exist [ 970.322505][ T5917] usb 1-1: unit 5 not found! [ 970.346426][T18173] sctp: [Deprecated]: syz.3.3181 (pid 18173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.346426][T18173] Use struct sctp_sack_info instead [ 970.480532][ T5917] usb 1-1: USB disconnect, device number 45 [ 970.581588][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.976698][ T5908] usb 4-1: USB disconnect, device number 65 [ 970.992469][ T5892] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 971.202389][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 971.242628][ T5892] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.278496][ T5892] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.312235][ T5892] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.354085][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 971.384610][ T5892] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 971.427101][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.467640][ T5892] usb 7-1: config 0 descriptor?? [ 971.757235][ T10] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 971.939419][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.953007][ T5892] hid (null): invalid report_size 26545 [ 971.971538][ T5892] hid_parser_main: 472 callbacks suppressed [ 971.971564][ T5892] magicmouse 0003:05AC:0265.003B: unknown main item tag 0x6 [ 971.974731][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 971.993805][ T5892] magicmouse 0003:05AC:0265.003B: invalid report_size 26545 [ 971.993833][ T5892] magicmouse 0003:05AC:0265.003B: item 0 2 1 7 parsing failed [ 971.995461][ T5892] magicmouse 0003:05AC:0265.003B: magicmouse hid parse failed [ 972.059802][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 972.087283][ T5892] magicmouse 0003:05AC:0265.003B: probe with driver magicmouse failed with error -22 [ 972.097098][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 972.097130][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.127855][T18188] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 972.162778][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 972.194705][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 972.228681][ T5892] usb 7-1: USB disconnect, device number 22 [ 972.263985][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 972.282576][ T5917] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 972.290102][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 972.305620][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 972.340165][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 972.357067][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.363752][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.370427][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.377074][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.383757][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.390395][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.396730][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.403376][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.409694][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.416334][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.423628][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.430282][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.437236][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.443892][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.450525][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.457169][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.463909][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 972.470642][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 972.492748][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 972.544940][ T5917] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 972.562404][ T5917] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 972.594010][ T5917] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 972.612541][ T5917] usb 1-1: config 9 has no interface number 0 [ 972.624297][ T5917] usb 1-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 972.661172][ T5917] usb 1-1: config 9 interface 221 has no altsetting 0 [ 972.685252][ T5917] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 972.698882][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.716108][ T5917] usb 1-1: Product: syz [ 972.730628][ T5917] usb 1-1: Manufacturer: syz [ 972.746292][ T5917] usb 1-1: SerialNumber: syz [ 972.782760][ T10] usb 6-1: USB disconnect, device number 56 [ 973.223402][ T5917] usb 1-1: USB disconnect, device number 46 [ 973.295602][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.512543][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3195'. [ 973.546732][T18208] netlink: 'syz.5.3195': attribute type 27 has an invalid length. [ 973.585861][T18208] netlink: 'syz.5.3195': attribute type 3 has an invalid length. [ 973.654513][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3195'. [ 973.958753][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 975.022789][T17069] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 975.193877][T17069] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 975.203192][T17069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.244993][T17069] usb 6-1: config 0 descriptor?? [ 975.278003][T17069] cp210x 6-1:0.0: cp210x converter detected [ 975.359072][T18225] syzkaller0: entered promiscuous mode [ 975.364785][T18225] syzkaller0: entered allmulticast mode [ 975.403333][T18226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.470656][T17069] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 975.501243][T17069] cp210x 6-1:0.0: querying part number failed [ 975.577907][T17069] usb 6-1: cp210x converter now attached to ttyUSB0 [ 975.681411][T18228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.994919][ T10] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 976.180330][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.211111][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 976.242869][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 976.279340][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 976.308769][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.361871][T18230] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 976.388017][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 976.419437][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 976.446128][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 976.451412][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 976.489128][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 976.511450][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 976.522623][T17069] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 976.672953][T17069] usb 3-1: device descriptor read/64, error -71 [ 976.703472][ T5892] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 976.874044][ T5892] usb 1-1: config 1 interface 0 has no altsetting 0 [ 976.884463][ T5892] usb 1-1: string descriptor 0 read error: -22 [ 976.899585][ T5892] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 976.912815][ C1] wdm_int_callback: 43 callbacks suppressed [ 976.912847][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 976.925487][ C1] wdm_int_callback: 43 callbacks suppressed [ 976.925510][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 976.941277][T17069] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 976.965019][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.044621][ T10] usb 7-1: USB disconnect, device number 23 [ 977.084363][T17069] usb 3-1: device descriptor read/64, error -71 [ 977.213228][T17069] usb usb3-port1: attempt power cycle [ 977.299936][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 977.343769][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 977.361351][ T5917] usb 6-1: USB disconnect, device number 57 [ 977.391268][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 977.445781][ T5917] cp210x 6-1:0.0: device disconnected [ 977.459565][T18253] netlink: 'syz.3.3210': attribute type 13 has an invalid length. [ 977.492499][T18253] netlink: 'syz.3.3210': attribute type 11 has an invalid length. [ 977.592547][T17069] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 977.613800][ T5892] uclogic 0003:5543:006E.003C: failed retrieving string descriptor #200: -71 [ 977.625677][T17069] usb 3-1: device descriptor read/8, error -71 [ 977.636086][ T5892] uclogic 0003:5543:006E.003C: failed retrieving pen parameters: -71 [ 977.650422][ T5892] uclogic 0003:5543:006E.003C: failed probing pen v2 parameters: -71 [ 977.670351][ T5892] uclogic 0003:5543:006E.003C: failed probing parameters: -71 [ 977.682807][ T5892] uclogic 0003:5543:006E.003C: probe with driver uclogic failed with error -71 [ 977.923930][ T5892] usb 1-1: USB disconnect, device number 47 [ 977.962471][T17069] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 978.083105][T17069] usb 3-1: device descriptor read/8, error -71 [ 978.283055][T17069] usb usb3-port1: unable to enumerate USB device [ 979.370190][T18272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.502407][T18279] xt_hashlimit: size too large, truncated to 1048576 [ 979.752451][T17069] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 979.942508][T17069] usb 1-1: Using ep0 maxpacket: 16 [ 979.996661][T17069] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 980.069222][T18292] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 980.079761][T17069] usb 1-1: config 0 has no interface number 1 [ 980.142460][T17069] usb 1-1: config 0 interface 0 has no altsetting 0 [ 980.171226][T17069] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 980.189992][T17069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.208220][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.227727][T17069] usb 1-1: Product: syz [ 980.242857][T17069] usb 1-1: Manufacturer: syz [ 980.272169][T17069] usb 1-1: SerialNumber: syz [ 980.283688][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.338300][T17069] usb 1-1: config 0 descriptor?? [ 980.393445][T17069] usb 1-1: selecting invalid altsetting 0 [ 980.471168][T17069] usb 1-1: Could not set interface, error -22 [ 980.521956][ T5908] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 980.711870][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 980.720892][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 980.731457][ T5908] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 980.740136][ T5908] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 980.759890][T18306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.795247][ T5908] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 980.840009][ T5908] usb 4-1: config 128 has no interface number 0 [ 980.873601][ T5908] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 980.961508][ T5908] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 980.982835][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 980.999713][ T5908] usb 4-1: config 128 interface 127 has no altsetting 0 [ 981.023817][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 981.036492][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.045049][ T5908] usb 4-1: Product: syz [ 981.049289][ T5908] usb 4-1: Manufacturer: syz [ 981.054578][ T5908] usb 4-1: SerialNumber: syz [ 981.172532][ T5917] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 981.285942][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.297843][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.306588][ T5917] usb 3-1: device descriptor read/64, error -71 [ 981.341187][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.352424][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.552883][ T5917] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 981.700517][ T5917] usb 3-1: device descriptor read/64, error -71 [ 981.723358][ T5908] usb 4-1: USB disconnect, device number 66 [ 981.795420][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.845912][ T5917] usb usb3-port1: attempt power cycle [ 982.046465][T18320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.232485][ T5917] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 982.253061][ T5917] usb 3-1: device descriptor read/8, error -71 [ 982.502367][ T5917] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 982.650004][ T5917] usb 3-1: device descriptor read/8, error -71 [ 982.782798][ T5917] usb usb3-port1: unable to enumerate USB device [ 983.047620][ T5917] usb 1-1: USB disconnect, device number 48 [ 983.693761][T18337] loop7: detected capacity change from 0 to 16384 [ 983.823609][T10192] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 983.852919][ T29] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 983.986771][T18346] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3238'. [ 984.057197][ T29] usb 1-1: Invalid ep0 maxpacket: 16 [ 984.069350][T10192] usb 6-1: device descriptor read/64, error -71 [ 984.192457][ T29] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 984.367908][T18351] trusted_key: encrypted_key: insufficient parameters specified [ 984.412842][ T5908] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 984.462281][ T29] usb 1-1: Invalid ep0 maxpacket: 16 [ 984.468115][ T29] usb usb1-port1: attempt power cycle [ 984.622602][T10192] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 984.641850][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 984.649269][ T5908] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 984.669539][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.711328][ T5908] usb 4-1: config 0 descriptor?? [ 984.758189][ T5908] as10x_usb: device has been detected [ 984.771949][T10192] usb 6-1: device descriptor read/64, error -71 [ 984.782672][ T5908] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 984.846352][ T5908] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 984.939087][ T29] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 984.955970][T10192] usb usb6-port1: attempt power cycle [ 984.986049][ T29] usb 1-1: Invalid ep0 maxpacket: 16 [ 985.001245][ T5908] as10x_usb: error during firmware upload part1 [ 985.045899][ T5908] Registered device nBox DVB-T Dongle [ 985.122974][ T29] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 985.174278][ T29] usb 1-1: Invalid ep0 maxpacket: 16 [ 985.183036][ T29] usb usb1-port1: unable to enumerate USB device [ 985.361845][T10192] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 985.402733][T10192] usb 6-1: device descriptor read/8, error -71 [ 985.654188][T10192] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 985.695010][T10192] usb 6-1: device descriptor read/8, error -71 [ 986.194042][T10192] usb usb6-port1: unable to enumerate USB device [ 987.001577][T18375] netlink: 'syz.0.3245': attribute type 13 has an invalid length. [ 987.225603][T18382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3248'. [ 987.868326][T10192] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 987.991428][T18388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.074846][T10192] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 988.086249][T10192] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 988.113104][T10192] usb 3-1: config 220 has no interface number 2 [ 988.119565][T10192] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 988.165855][T10192] usb 3-1: config 220 interface 0 has no altsetting 0 [ 988.241844][T10192] usb 3-1: config 220 interface 76 has no altsetting 0 [ 988.297714][T10192] usb 3-1: config 220 interface 1 has no altsetting 0 [ 988.334019][T10192] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 988.381925][T10192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.472723][T10192] usb 3-1: Product: syz [ 988.484097][T10192] usb 3-1: Manufacturer: syz [ 988.492458][T10192] usb 3-1: SerialNumber: syz [ 988.574169][ T5892] usb 4-1: USB disconnect, device number 67 [ 988.714419][ T5892] Unregistered device nBox DVB-T Dongle [ 988.726743][ T5892] as10x_usb: device has been disconnected [ 988.784122][T10192] usb 3-1: selecting invalid altsetting 0 [ 988.861282][T10192] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 988.894307][T10192] uvcvideo 3-1:220.0: No valid video chain found. [ 988.935136][T10192] usb 3-1: selecting invalid altsetting 0 [ 988.992328][T10192] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 989.029592][T10192] usb 3-1: USB disconnect, device number 67 [ 989.122513][ T5892] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 989.304182][ T5892] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 989.342481][ T5892] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 989.391674][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 989.435983][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 989.501420][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 989.526626][ T5892] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 989.536222][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 989.545321][ T5892] usb 4-1: Product: syz [ 989.552455][ T5892] usb 4-1: Manufacturer: syz [ 989.585562][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 989.615338][ T5892] cdc_wdm 4-1:1.0: skipping garbage [ 989.642880][ T5892] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 989.651291][ T5892] cdc_wdm 4-1:1.0: Unknown control protocol [ 989.674468][T18395] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3251'. [ 989.686733][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 989.853220][T18400] netlink: 'syz.5.3253': attribute type 21 has an invalid length. [ 989.861118][T18400] IPv6: NLM_F_CREATE should be specified when creating new route [ 989.917326][T18400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 989.924712][T18400] IPv6: NLM_F_CREATE should be set when creating new route [ 989.932043][T18400] IPv6: NLM_F_CREATE should be set when creating new route [ 989.939330][T18400] IPv6: NLM_F_CREATE should be set when creating new route [ 990.015406][T18400] team0: left allmulticast mode [ 990.020493][T18400] team_slave_1: left allmulticast mode [ 990.074836][T18400] net_ratelimit: 10 callbacks suppressed [ 990.074849][T18400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 990.139081][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 990.142021][T10192] usb 4-1: USB disconnect, device number 68 [ 990.151332][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 990.157984][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 990.164084][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 990.174048][ T5892] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 990.232604][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 990.337281][T18409] xt_cgroup: invalid path, errno=-2 [ 990.342891][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 990.346358][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.386458][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.398160][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 990.423978][ T29] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 990.432993][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 990.452450][ T29] usb 7-1: config 0 has no interface number 0 [ 990.468805][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 990.489687][ T29] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 990.501808][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.520130][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.542378][ T29] usb 7-1: Product: syz [ 990.552435][ T29] usb 7-1: Manufacturer: syz [ 990.557105][ T29] usb 7-1: SerialNumber: syz [ 990.584055][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 990.599265][ T5892] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 990.613561][ T29] usb 7-1: config 0 descriptor?? [ 990.640919][ T29] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 990.652672][ T5892] usb 3-1: Manufacturer: syz [ 990.681007][ T5892] usb 3-1: config 0 descriptor?? [ 990.853585][ T29] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 990.915377][ T29] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 991.013585][T18428] tmpfs: Unknown parameter 'fd' [ 991.063771][ T5892] rc_core: IR keymap rc-hauppauge not found [ 991.069821][ T5892] Registered IR keymap rc-empty [ 991.112747][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.136795][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.187648][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 991.205180][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 991.224023][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.238708][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 991.247153][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.278867][ T5901] usb 7-1: USB disconnect, device number 24 [ 991.284562][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.299840][T10192] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 991.306610][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.332544][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.333355][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 991.363580][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.382581][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.390909][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 991.421285][ T5901] quatech2 7-1:0.51: device disconnected [ 991.424243][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.435487][ T29] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 991.460583][T18434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.472937][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.501949][T10192] usb 6-1: Using ep0 maxpacket: 16 [ 991.503702][ T5892] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 991.514551][T10192] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 991.514582][T10192] usb 6-1: config 0 has no interface number 0 [ 991.514624][T10192] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.514652][T10192] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.514692][T10192] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 991.514717][T10192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.552560][T10192] usb 6-1: config 0 descriptor?? [ 991.615972][ T5892] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 991.627032][ T5892] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 991.644900][ T5892] usb 3-1: USB disconnect, device number 68 [ 991.652658][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 991.662790][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 991.674629][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.695853][ T29] usb 4-1: Product: syz [ 991.707630][ T29] usb 4-1: Manufacturer: syz [ 991.725447][ T29] usb 4-1: SerialNumber: syz [ 991.931139][T18438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.962892][T18430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.987629][T18430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.020381][T18440] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 992.236043][T10192] uclogic 0003:28BD:0071.003D: pen parameters not found [ 992.243366][T10192] uclogic 0003:28BD:0071.003D: interface is invalid, ignoring [ 992.402817][ T5901] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 992.449780][T10192] usb 6-1: USB disconnect, device number 62 [ 992.601923][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 992.616733][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 992.634494][ T5901] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 992.660744][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.685551][ T5901] usb 7-1: Product: syz [ 992.697949][ T5901] usb 7-1: Manufacturer: syz [ 992.714175][ T5901] usb 7-1: SerialNumber: syz [ 992.743240][ T5901] usb 7-1: config 0 descriptor?? [ 992.759952][ T5901] hub 7-1:0.0: bad descriptor, ignoring hub [ 992.772683][ T5901] hub 7-1:0.0: probe with driver hub failed with error -5 [ 992.802324][ T5901] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.959769][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.984130][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.013315][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.062843][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.129789][ T5832] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 993.136114][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.176650][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.183768][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.200530][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.265680][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.344089][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.398030][T18443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.438174][T18443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.599674][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 993.607593][ T29] usb 4-1: MIDIStreaming interface descriptor not found [ 993.736716][ T5901] usb 7-1: USB disconnect, device number 25 [ 993.971597][ T29] usb 4-1: USB disconnect, device number 69 [ 994.114376][ T6436] udevd[6436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 994.273043][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.302224][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.345677][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.378374][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.453233][T17899] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 994.532561][ T5901] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 994.626056][T17899] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 994.637867][T17899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.665959][T17899] usb 1-1: Product: syz [ 994.676861][T17899] usb 1-1: Manufacturer: syz [ 994.686926][T17899] usb 1-1: SerialNumber: syz [ 994.695246][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 994.703697][ T5901] usb 3-1: config 0 has no interface number 0 [ 994.717078][ T5901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.739644][T17899] usb 1-1: config 0 descriptor?? [ 994.755428][ T5901] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.800470][ T5901] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.819204][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.857479][ T5901] usb 3-1: config 0 descriptor?? [ 994.957344][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 995.172842][T18485] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 995.204601][T17899] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 995.232582][ T5901] usbhid 3-1:0.1: can't add hid device: -71 [ 995.249438][ T5901] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 995.500012][ T5901] usb 3-1: USB disconnect, device number 69 [ 995.525587][T18514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.851999][T18519] netlink: 'syz.6.3284': attribute type 13 has an invalid length. [ 996.842011][T17899] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 996.864795][T17899] usb 1-1: USB disconnect, device number 53 [ 997.452437][ T29] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 997.626021][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 997.645257][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 997.931450][T18540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.238494][ T29] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 998.302443][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 998.396862][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 998.443810][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 998.451409][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 998.463193][ T5917] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 998.492527][ T29] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 998.522927][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 998.555561][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 998.596799][ T29] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 998.606683][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 998.638798][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 998.651189][ T29] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 998.663861][T17813] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 998.688505][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 998.700425][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 998.721140][ T5917] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 998.742635][ T29] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 998.767720][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.799167][ T29] usb 3-1: string descriptor 0 read error: -22 [ 998.811175][ T29] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 998.834003][ T5917] usb 1-1: config 0 descriptor?? [ 998.841260][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.852682][T17813] usb 4-1: Using ep0 maxpacket: 32 [ 998.868217][T17813] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 998.878487][T17813] usb 4-1: config 0 has no interface number 0 [ 998.974034][ T29] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 998.983379][T17813] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 999.025840][T17813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.078782][T17813] usb 4-1: Product: syz [ 999.088907][T17813] usb 4-1: Manufacturer: syz [ 999.117695][T17813] usb 4-1: SerialNumber: syz [ 999.169980][T17813] usb 4-1: config 0 descriptor?? [ 999.204734][T17813] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 999.342574][ T29] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 999.440522][T17813] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 999.470851][T17813] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 999.516801][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 999.535384][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 999.555948][ T29] usb 7-1: can't read configurations, error -61 [ 999.713120][ T29] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 999.847431][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 999.855834][T17813] usb 4-1: USB disconnect, device number 70 [ 999.868450][T17813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 999.885313][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 999.896205][ T5917] ath6kl: Failed to submit usb control message: -110 [ 999.907518][ T5917] ath6kl: unable to send the bmi data to the device: -110 [ 999.917127][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 999.925640][ T29] usb 7-1: can't read configurations, error -61 [ 999.936114][ T5917] ath6kl: Unable to send get target info: -110 [ 999.944090][T17813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 999.956905][ T29] usb usb7-port1: attempt power cycle [ 999.966244][ T5917] ath6kl: Failed to init ath6kl core: -110 [ 999.987944][ T5917] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1000.001452][T17813] quatech2 4-1:0.51: device disconnected [ 1000.312558][ T29] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1000.335197][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1000.345774][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1000.365882][ T29] usb 7-1: can't read configurations, error -61 [ 1000.512566][ T29] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1000.548605][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1000.569073][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1000.590500][ T29] usb 7-1: can't read configurations, error -61 [ 1000.607116][ T29] usb usb7-port1: unable to enumerate USB device [ 1000.707847][ T29] usb 3-1: USB disconnect, device number 70 [ 1000.859047][ T5908] usb 1-1: USB disconnect, device number 54 [ 1001.019392][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'. [ 1001.122363][ T29] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1001.252791][ T29] usb 6-1: device descriptor read/64, error -71 [ 1001.441911][ T5908] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1001.502418][ T29] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1001.611791][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 1001.619939][ T5908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1001.630222][ T5908] usb 1-1: config 244 has an invalid interface number: 68 but max is 0 [ 1001.634018][ T29] usb 6-1: device descriptor read/64, error -71 [ 1001.639906][ T5908] usb 1-1: config 244 has no interface number 0 [ 1001.655705][ T5908] usb 1-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 1001.718980][ T5908] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1001.744654][ T5908] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1001.767921][ T5908] usb 1-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 1001.779920][ T29] usb usb6-port1: attempt power cycle [ 1001.793138][ T5908] usb 1-1: config 244 interface 68 altsetting 3 bulk endpoint 0xA has invalid maxpacket 0 [ 1001.821799][ T5908] usb 1-1: config 244 interface 68 has no altsetting 0 [ 1001.843379][ T5908] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1001.853174][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.862012][ T5908] usb 1-1: Product: syz [ 1001.874469][ T5908] usb 1-1: Manufacturer: syz [ 1001.883823][ T5908] usb 1-1: SerialNumber: syz [ 1002.097881][T18573] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3299'. [ 1002.122634][ T29] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1002.143201][ T29] usb 6-1: device descriptor read/8, error -71 [ 1002.361332][T18576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3480241289 (13920965156 ns) > initial count (268 ns). Using initial count to start timer. [ 1002.405525][ T29] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1002.443254][ T29] usb 6-1: device descriptor read/8, error -71 [ 1002.578680][ T29] usb usb6-port1: unable to enumerate USB device [ 1002.710376][ T5908] comedi comedi5: Endpoint has wrong direction [ 1002.740047][ T5908] dt9812 1-1:244.68: driver 'dt9812' failed to auto-configure device. [ 1002.812604][ T5908] usb 1-1: USB disconnect, device number 55 [ 1002.917836][T18587] netlink: 'syz.6.3302': attribute type 13 has an invalid length. [ 1003.139240][T18588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.291339][T18603] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 1004.762547][ T5908] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1004.792482][T17813] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1004.941817][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1004.964942][T17813] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 1004.966890][ T5908] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1004.976000][T17813] usb 6-1: config 5 has no interface number 0 [ 1005.040986][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.094547][ T5908] usb 3-1: config 0 descriptor?? [ 1005.137752][T17813] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1005.164245][ T5908] as10x_usb: device has been detected [ 1005.170337][ T5908] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1005.249188][T17813] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1005.292510][ T5908] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1005.323695][T17813] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1005.383185][ T5908] as10x_usb: error during firmware upload part1 [ 1005.402444][T18614] FAULT_INJECTION: forcing a failure. [ 1005.402444][T18614] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.426796][ T5908] Registered device nBox DVB-T Dongle [ 1005.445212][T17813] usb 6-1: config 5 interface 123 has no altsetting 0 [ 1005.483710][T18614] CPU: 0 UID: 0 PID: 18614 Comm: syz.6.3308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.483735][T18614] Tainted: [L]=SOFTLOCKUP [ 1005.483741][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1005.483757][T18614] Call Trace: [ 1005.483764][T18614] [ 1005.483771][T18614] dump_stack_lvl+0xe8/0x150 [ 1005.483799][T18614] should_fail_ex+0x412/0x560 [ 1005.483846][T18614] should_failslab+0xa8/0x100 [ 1005.483869][T18614] __kmalloc_noprof+0xe8/0x760 [ 1005.483888][T18614] ? tomoyo_encode+0x28b/0x550 [ 1005.483908][T18614] tomoyo_encode+0x28b/0x550 [ 1005.483928][T18614] tomoyo_mount_permission+0x3a2/0x9d0 [ 1005.483954][T18614] ? stack_depot_save_flags+0x33/0x810 [ 1005.483977][T18614] ? terminate_walk+0x3d7/0x510 [ 1005.483991][T18614] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 1005.484015][T18614] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1005.484078][T18614] security_sb_mount+0xe4/0x320 [ 1005.484097][T18614] path_mount+0xbc/0x10e0 [ 1005.484119][T18614] ? user_path_at+0xd4/0x160 [ 1005.484138][T18614] ? user_path_at+0xd4/0x160 [ 1005.484155][T18614] __se_sys_mount+0x31d/0x420 [ 1005.484183][T18614] ? __pfx___se_sys_mount+0x10/0x10 [ 1005.484211][T18614] ? __x64_sys_mount+0x20/0xc0 [ 1005.484236][T18614] do_syscall_64+0x14d/0xf80 [ 1005.484255][T18614] ? trace_irq_disable+0x3b/0x150 [ 1005.484269][T18614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.484286][T18614] ? clear_bhb_loop+0x40/0x90 [ 1005.484305][T18614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.484321][T18614] RIP: 0033:0x7f5cca99c819 [ 1005.484336][T18614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.484349][T18614] RSP: 002b:00007f5ccb8ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1005.484366][T18614] RAX: ffffffffffffffda RBX: 00007f5ccac15fa0 RCX: 00007f5cca99c819 [ 1005.484378][T18614] RDX: 0000000000000000 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1005.484388][T18614] RBP: 00007f5ccb8ca090 R08: 00002000000003c0 R09: 0000000000000000 [ 1005.484398][T18614] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000001 [ 1005.484408][T18614] R13: 00007f5ccac16038 R14: 00007f5ccac15fa0 R15: 00007f5ccad3fa48 [ 1005.484431][T18614] [ 1005.974854][T17813] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1006.020614][T17813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.067392][T17813] usb 6-1: Product: syz [ 1006.107215][T17813] usb 6-1: Manufacturer: syz [ 1006.166898][T17813] usb 6-1: SerialNumber: syz [ 1007.111837][ T5908] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1007.291869][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 1007.299164][ T5908] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 1007.311049][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.338322][ T5908] usb 1-1: config 0 has no interface number 0 [ 1007.359396][ T5908] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1007.421300][ T5908] usb 1-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1007.468042][ T5908] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1007.509955][ T5908] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1007.530744][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.542275][ T5908] usb 1-1: Product: syz [ 1007.562668][ T5908] usb 1-1: Manufacturer: syz [ 1007.580613][ T5908] usb 1-1: SerialNumber: syz [ 1007.732529][T17899] usb 3-1: USB disconnect, device number 71 [ 1007.759288][T17899] Unregistered device nBox DVB-T Dongle [ 1007.769268][ T5908] usb 1-1: config 0 descriptor?? [ 1007.792419][T17899] as10x_usb: device has been disconnected [ 1007.805063][ T5908] redrat3 1-1:0.83: Couldn't find all endpoints [ 1007.943755][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1008.013262][T18629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.044654][T18629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.385215][ T5892] usb 1-1: USB disconnect, device number 56 [ 1008.581044][T17813] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1008.797020][T17813] usb 6-1: USB disconnect, device number 67 [ 1009.473845][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.527029][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.797186][ T5892] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1009.902429][T17813] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1010.029078][ T5892] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1010.066801][ T5892] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1010.104182][ T5892] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1010.133738][T17813] usb 1-1: Using ep0 maxpacket: 16 [ 1010.138990][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.178885][T17813] usb 1-1: config 0 has no interfaces? [ 1010.209356][T17813] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.250144][T17813] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.289073][T17813] usb 1-1: Manufacturer: syz [ 1010.312903][T17813] usb 1-1: config 0 descriptor?? [ 1010.707175][ T5892] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1010.774003][ T5892] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input56 [ 1010.802491][T18650] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 1010.882473][ T5892] input: failed to attach handler kbd to device input56, error: -5 [ 1010.944091][T18650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.984911][ T5892] usb 6-1: USB disconnect, device number 68 [ 1011.007254][T18651] bond0: (slave gretap1): making interface the new active one [ 1011.123655][T18651] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1011.169360][T18670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.681673][T18673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1012.112104][T18681] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3326'. [ 1012.291836][ T5908] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1012.350225][T18681] fuse: Bad value for 'fd' [ 1012.469442][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.497374][ T5908] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1012.532604][ T5908] usb 4-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1012.543133][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1012.566983][ T5908] usb 4-1: Product: syz [ 1012.585670][ T5908] usb 4-1: Manufacturer: syz [ 1012.603816][ T5908] usb 4-1: SerialNumber: syz [ 1012.620026][ T5908] usb 4-1: config 0 descriptor?? [ 1013.153023][ T5908] usb 4-1: USB disconnect, device number 71 [ 1013.207749][T13689] udevd[13689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.492370][T17069] usb 1-1: USB disconnect, device number 57 [ 1013.670362][T18692] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 1013.786768][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1013.821655][T18697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1013.982260][T17813] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1014.206649][T17813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.233502][T17813] usb 4-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 1014.254418][T17813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.277192][T17813] usb 4-1: config 0 descriptor?? [ 1014.309267][T17813] usb 4-1: active config #0 != 1 ?? [ 1014.560175][T18719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap5 [ 1014.583158][T17813] usb 4-1: USB disconnect, device number 72 [ 1014.612518][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1015.125505][T18723] trusted_key: encrypted_key: insufficient parameters specified [ 1015.389534][T18727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.558251][T18729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap6 [ 1015.733709][T17000] Bluetooth: hci0: command 0x0406 tx timeout [ 1017.268386][ T129] ------------[ cut here ]------------ [ 1017.273994][ T129] conntrack cleanup blocked for 60s [ 1017.274016][ T129] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#0: kworker/u8:6/129 [ 1017.291882][ T129] Modules linked in: [ 1017.296293][ T129] CPU: 0 UID: 0 PID: 129 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.307304][ T129] Tainted: [L]=SOFTLOCKUP [ 1017.311642][ T129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.321845][ T129] Workqueue: netns cleanup_net [ 1017.326690][ T129] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.333698][ T129] Code: 08 48 89 df e8 7d 26 65 f8 4c 8b 3b 49 39 df 74 69 e8 50 d9 fa f7 45 31 e4 e9 8e fe ff ff e8 43 d9 fa f7 48 8d 3d 6c 26 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1017.353521][ T129] RSP: 0018:ffffc90002e978b0 EFLAGS: 00010293 [ 1017.359643][ T129] RAX: ffffffff89cad5ad RBX: ffffc90002e97a50 RCX: ffff88801f77bd00 [ 1017.367695][ T129] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020fc20 [ 1017.375748][ T129] RBP: 0000000000000001 R08: ffff88807ef9d003 R09: 1ffff1100fdf3a00 [ 1017.383974][ T129] R10: dffffc0000000000 R11: ffffed100fdf3a01 R12: 0000000000000001 [ 1017.392038][ T129] R13: dffffc0000000000 R14: 0000000100011768 R15: 0000000100011769 [ 1017.400037][ T129] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 1017.409008][ T129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1017.415723][ T129] CR2: 00002000000c4030 CR3: 000000002a9e4000 CR4: 00000000003526f0 [ 1017.423735][ T129] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 1017.431801][ T129] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1017.439892][ T129] Call Trace: [ 1017.443259][ T129] [ 1017.446221][ T129] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1017.452465][ T129] ops_undo_list+0x52b/0x940 [ 1017.457103][ T129] ? __pfx_ops_undo_list+0x10/0x10 [ 1017.462292][ T129] ? idr_destroy+0x218/0x290 [ 1017.466929][ T129] ? do_raw_spin_unlock+0xf5/0x210 [ 1017.472144][ T129] cleanup_net+0x56b/0x800 [ 1017.476597][ T129] ? __pfx_cleanup_net+0x10/0x10 [ 1017.481550][ T129] ? process_scheduled_works+0xa8d/0x18c0 [ 1017.487361][ T129] ? process_scheduled_works+0xa8d/0x18c0 [ 1017.494049][ T129] process_scheduled_works+0xb6e/0x18c0 [ 1017.499639][ T129] ? __pfx_process_scheduled_works+0x10/0x10 [ 1017.505867][ T129] ? assign_work+0x3d5/0x5e0 [ 1017.510475][ T129] worker_thread+0xa53/0xfc0 [ 1017.515116][ T129] kthread+0x388/0x470 [ 1017.519189][ T129] ? __pfx_worker_thread+0x10/0x10 [ 1017.524333][ T129] ? __pfx_kthread+0x10/0x10 [ 1017.528926][ T129] ret_from_fork+0x51e/0xb90 [ 1017.533575][ T129] ? __pfx_ret_from_fork+0x10/0x10 [ 1017.538694][ T129] ? __switch_to+0xc7d/0x1450 [ 1017.543508][ T129] ? __pfx_kthread+0x10/0x10 [ 1017.548110][ T129] ret_from_fork_asm+0x1a/0x30 [ 1017.552968][ T129] [ 1017.556029][ T129] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1017.563321][ T129] CPU: 0 UID: 0 PID: 129 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.574352][ T129] Tainted: [L]=SOFTLOCKUP [ 1017.578674][ T129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1017.588749][ T129] Workqueue: netns cleanup_net [ 1017.593533][ T129] Call Trace: [ 1017.596838][ T129] [ 1017.599806][ T129] vpanic+0x56c/0xa60 [ 1017.603836][ T129] ? __pfx__printk+0x10/0x10 [ 1017.608495][ T129] ? __pfx_vpanic+0x10/0x10 [ 1017.613032][ T129] ? is_bpf_text_address+0x292/0x2b0 [ 1017.618350][ T129] ? is_bpf_text_address+0x26/0x2b0 [ 1017.623584][ T129] panic+0xc5/0xd0 [ 1017.627362][ T129] ? __pfx_panic+0x10/0x10 [ 1017.631831][ T129] ? ret_from_fork_asm+0x1a/0x30 [ 1017.636806][ T129] __warn+0x315/0x4f0 [ 1017.640815][ T129] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.646993][ T129] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.653186][ T129] __report_bug+0x29a/0x540 [ 1017.657723][ T129] ? __lock_acquire+0x6b5/0x2cf0 [ 1017.662717][ T129] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.668960][ T129] ? __pfx___report_bug+0x10/0x10 [ 1017.674014][ T129] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 1017.680202][ T129] report_bug_entry+0x19a/0x290 [ 1017.685093][ T129] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.691291][ T129] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 1017.697475][ T129] handle_bug+0xce/0x200 [ 1017.701765][ T129] exc_invalid_op+0x1a/0x50 [ 1017.706311][ T129] asm_exc_invalid_op+0x1a/0x20 [ 1017.711179][ T129] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1017.717969][ T129] Code: 08 48 89 df e8 7d 26 65 f8 4c 8b 3b 49 39 df 74 69 e8 50 d9 fa f7 45 31 e4 e9 8e fe ff ff e8 43 d9 fa f7 48 8d 3d 6c 26 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1017.737604][ T129] RSP: 0018:ffffc90002e978b0 EFLAGS: 00010293 [ 1017.743718][ T129] RAX: ffffffff89cad5ad RBX: ffffc90002e97a50 RCX: ffff88801f77bd00 [ 1017.751917][ T129] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020fc20 [ 1017.759916][ T129] RBP: 0000000000000001 R08: ffff88807ef9d003 R09: 1ffff1100fdf3a00 [ 1017.767904][ T129] R10: dffffc0000000000 R11: ffffed100fdf3a01 R12: 0000000000000001 [ 1017.775893][ T129] R13: dffffc0000000000 R14: 0000000100011768 R15: 0000000100011769 [ 1017.783912][ T129] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 1017.790117][ T129] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1017.796213][ T129] ops_undo_list+0x52b/0x940 [ 1017.800832][ T129] ? __pfx_ops_undo_list+0x10/0x10 [ 1017.805967][ T129] ? idr_destroy+0x218/0x290 [ 1017.810574][ T129] ? do_raw_spin_unlock+0xf5/0x210 [ 1017.815705][ T129] cleanup_net+0x56b/0x800 [ 1017.820140][ T129] ? __pfx_cleanup_net+0x10/0x10 [ 1017.825103][ T129] ? process_scheduled_works+0xa8d/0x18c0 [ 1017.830850][ T129] ? process_scheduled_works+0xa8d/0x18c0 [ 1017.836597][ T129] process_scheduled_works+0xb6e/0x18c0 [ 1017.842197][ T129] ? __pfx_process_scheduled_works+0x10/0x10 [ 1017.848205][ T129] ? assign_work+0x3d5/0x5e0 [ 1017.852823][ T129] worker_thread+0xa53/0xfc0 [ 1017.857468][ T129] kthread+0x388/0x470 [ 1017.861559][ T129] ? __pfx_worker_thread+0x10/0x10 [ 1017.866696][ T129] ? __pfx_kthread+0x10/0x10 [ 1017.871309][ T129] ret_from_fork+0x51e/0xb90 [ 1017.875928][ T129] ? __pfx_ret_from_fork+0x10/0x10 [ 1017.881059][ T129] ? __switch_to+0xc7d/0x1450 [ 1017.885760][ T129] ? __pfx_kthread+0x10/0x10 [ 1017.890374][ T129] ret_from_fork_asm+0x1a/0x30 [ 1017.895206][ T129] [ 1017.898878][ T129] Kernel Offset: disabled [ 1017.903212][ T129] Rebooting in 86400 seconds..